How to verify hardware-backed encryption/decryption (AES/RSA) via ELE API on i.MX95

[Giorgos_Sofroniou]

I'm working with the NXP EdgeLock Enclave (ELE) on the Verdin i.MX95, using the imx-secure-enclave library (https://github.com/nxp-imx/imx-secure-enclave). I need to demonstrate/validate that the hardware crypto engine correctly supports the following operations:

• generateSymmetricKey
• injectSymmetricKey
• generatePublicPrivateKeyPair(shares the public key and stores internally the private key)
• encrypt(data, keyId)
• decrypt(data,keyId)
• sign
• VerifySignature

For at least the following base algorithms: AES (symmetric) and RSA (asymmetric)

Is there a recommended test suite, sample application, or reference that exercises all of the above operations end-to-end?

Any pointers to example code, test procedures, or documentation covering hardware validation of these primitives would be appreciated.

[Oswalag]

Hello, 

You can test with ele_hsm_test, it is part of the imx-secure-enclave library.

It exercises the full HSM API surface — key generation, key import, cipher, sign, verify, and more — against the physical ELE hardware.

AES usage

imx_sec_apps/imx-ele-apps/aes_usage at master · nxp-imx-support/imx_sec_apps

RSA validation

The HSM test application supports:

./ele_hsm_test --rsa